Extracted

• • Target

    6f6912c335d5e30e906e9e1edb9988f78f0aac7432eaed5d22e04c03345700b5

  • Size

    385KB

  • MD5

    a1ac5a2ed802e90a9b4efc6793b8e522

  • SHA1

    9284d941a71218a3b7888056215a504d15fd888b

  • SHA256

    6f6912c335d5e30e906e9e1edb9988f78f0aac7432eaed5d22e04c03345700b5

  • SHA512

    30bcf452a45e3fcf843ffd13a4f3a1e1384284706fd3d3dca8fd3b0453c85ad48aab2c4b43e5a292fc917c2703eca44018bb962d1b3a75108fc3c2c69545ff7f

  • SSDEEP

    6144:KEy+bnr+tp0yN90QEZAYLiFRoN24uBXUkht+UO4tSzPxczG1IojBSJCpZ:gMrdy90TA1E2F/M9PxczaIWS4pZ

  Score

  10^/10

  healerredlinemangodiscoverydropperevasioninfostealerpersistencetrojan

  • Detects Healer an antivirus disabler dropper

  • Healer

    Healer an antivirus disabler dropper.

    dropperhealer

  • Healer family

    healer

  • Modifies Windows Defender Real-time Protection settings

    evasiontrojan

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

    infostealerredline

  • RedLine payload

  • Redline family

    redline

  • Executes dropped EXE

  • Windows security modification

    evasiontrojan

  • Adds Run key to start application

    persistence
  behavioral1